Boletines de Vulnerabilidades

CVE-2025-8282

   
Software afectado WORDPRESS
 
The SureForms WordPress plugin before 1.9.1 does not sanitise and escape some parameters when outputing them in the page, which could allow admin and above users to perform Cross-Site Scripting attacks.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-8282